From a0e8df13f1f65ea831bf528d4775884c5ed3c3bf Mon Sep 17 00:00:00 2001 From: netblue30 Date: Thu, 29 Oct 2015 08:33:18 -0400 Subject: readme.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index abd53c840..822c455e8 100644 --- a/README.md +++ b/README.md @@ -78,10 +78,10 @@ $ firejail --ignore=seccomp wine Enable protocol filter. It is based on seccomp and it filters the first argument to socket system call. If the value is not recognized, seccomp will kill the process. -Recognized values: unix, inet, inet6, netlink and packet. +Valid values: unix, inet, inet6, netlink and packet. "unix" describes the regular Unix socket connections, -and "inet" and "inet6" are the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol +and "inet" and "inet6" describe the regular IPv4 and IPv6 traffic. Most GUI applications need "unix,inet,inet6". "netlink" is the protocol used to talk to Linux kernel. You'll only need this for applications such as [iproute2](http://www.linuxfoundation.org/collaborate/workgroups/networking/iproute2) for system administration, and "packet" is used by sniffers to talk directly with the Ethernet layer. -- cgit v1.2.3-70-g09d2